regscale-cli 6.24.0.0__py3-none-any.whl → 6.25.0.0__py3-none-any.whl

regscale/integrations/commercial/synqly/vulnerabilities.py

@@ -14,6 +14,33 @@ def vulnerabilities() -> None:
     pass
 
 
+@vulnerabilities.command(name="build-query")
+@click.option(
+    "--provider",
+    required=False,
+    help="Provider ID (e.g., vulnerabilities_armis_centrix). If not specified, starts interactive mode.",
+)
+@click.option("--validate", help="Validate a filter string against provider capabilities")
+@click.option("--list-fields", is_flag=True, default=False, help="List all available fields for the provider")
+def build_query(provider, validate, list_fields):
+    """
+    Build and validate filter queries for Vulnerabilities connectors.
+
+    Examples:
+        # Build a filter query
+        regscale vulnerabilities build-query
+
+        # List all fields for a specific provider
+        regscale vulnerabilities build-query --provider vulnerabilities_armis_centrix --list-fields
+
+        # Validate a filter string
+        regscale vulnerabilities build-query --provider vulnerabilities_armis_centrix --validate "device.ip[eq]192.168.1.1"
+    """
+    from regscale.integrations.commercial.synqly.query_builder import handle_build_query
+
+    handle_build_query("vulnerabilities", provider, validate, list_fields)
+
+
 @vulnerabilities.command(name="sync_crowdstrike")
 @regscale_ssp_id()
 @click.option(
@@ -37,19 +64,33 @@ def vulnerabilities() -> None:
     is_flag=True,
     default=False,
 )
+@click.option(
+    "--asset_filter",
+    help='STRING: Apply filters to asset queries. Can be a single filter "field[operator]value" or semicolon-separated filters "field1[op]value1;field2[op]value2"',
+    required=False,
+    type=str,
+    default=None,
+)
 @click.option(
     "--url",
     type=click.STRING,
     help="Base URL for the CrowdStrike Falcon® Spotlight API.",
     required=False,
 )
-def sync_crowdstrike(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, url: str) -> None:
+def sync_crowdstrike(
+    regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, asset_filter: str, url: str
+) -> None:
     """Sync Vulnerabilities from Crowdstrike to RegScale."""
     from regscale.models.integration_models.synqly_models.connectors import Vulnerabilities
 
     vulnerabilities_crowdstrike = Vulnerabilities("crowdstrike")
     vulnerabilities_crowdstrike.run_sync(
-        regscale_ssp_id=regscale_ssp_id, vuln_filter=vuln_filter, scan_date=scan_date, all_scans=all_scans, url=url
+        regscale_ssp_id=regscale_ssp_id,
+        vuln_filter=vuln_filter,
+        scan_date=scan_date,
+        all_scans=all_scans,
+        filter=asset_filter.split(";") if asset_filter else [],
+        url=url,
     )
 
 
@@ -72,13 +113,26 @@ def sync_crowdstrike(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime
 @click.option(
     "--all_scans", help="Whether to sync all vulnerabilities from Nucleus", required=False, is_flag=True, default=False
 )
-def sync_nucleus(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool) -> None:
+@click.option(
+    "--asset_filter",
+    help='STRING: Apply filters to asset queries. Can be a single filter "field[operator]value" or semicolon-separated filters "field1[op]value1;field2[op]value2"',
+    required=False,
+    type=str,
+    default=None,
+)
+def sync_nucleus(
+    regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, asset_filter: str
+) -> None:
     """Sync Vulnerabilities from Nucleus to RegScale."""
     from regscale.models.integration_models.synqly_models.connectors import Vulnerabilities
 
     vulnerabilities_nucleus = Vulnerabilities("nucleus")
     vulnerabilities_nucleus.run_sync(
-        regscale_ssp_id=regscale_ssp_id, vuln_filter=vuln_filter, scan_date=scan_date, all_scans=all_scans
+        regscale_ssp_id=regscale_ssp_id,
+        vuln_filter=vuln_filter,
+        scan_date=scan_date,
+        all_scans=all_scans,
+        filter=asset_filter.split(";") if asset_filter else [],
     )
 
 
@@ -105,13 +159,26 @@ def sync_nucleus(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, al
     is_flag=True,
     default=False,
 )
-def sync_qualys_cloud(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool) -> None:
+@click.option(
+    "--asset_filter",
+    help='STRING: Apply filters to asset queries. Can be a single filter "field[operator]value" or semicolon-separated filters "field1[op]value1;field2[op]value2"',
+    required=False,
+    type=str,
+    default=None,
+)
+def sync_qualys_cloud(
+    regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, asset_filter: str
+) -> None:
     """Sync Vulnerabilities from Qualys Cloud to RegScale."""
     from regscale.models.integration_models.synqly_models.connectors import Vulnerabilities
 
     vulnerabilities_qualys_cloud = Vulnerabilities("qualys_cloud")
     vulnerabilities_qualys_cloud.run_sync(
-        regscale_ssp_id=regscale_ssp_id, vuln_filter=vuln_filter, scan_date=scan_date, all_scans=all_scans
+        regscale_ssp_id=regscale_ssp_id,
+        vuln_filter=vuln_filter,
+        scan_date=scan_date,
+        all_scans=all_scans,
+        filter=asset_filter.split(";") if asset_filter else [],
     )
 
 
@@ -138,13 +205,26 @@ def sync_qualys_cloud(regscale_ssp_id: int, vuln_filter: str, scan_date: datetim
     is_flag=True,
     default=False,
 )
-def sync_rapid7_insight_cloud(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool) -> None:
+@click.option(
+    "--asset_filter",
+    help='STRING: Apply filters to asset queries. Can be a single filter "field[operator]value" or semicolon-separated filters "field1[op]value1;field2[op]value2"',
+    required=False,
+    type=str,
+    default=None,
+)
+def sync_rapid7_insight_cloud(
+    regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, asset_filter: str
+) -> None:
     """Sync Vulnerabilities from Rapid7 Insight Cloud to RegScale."""
     from regscale.models.integration_models.synqly_models.connectors import Vulnerabilities
 
     vulnerabilities_rapid7_insight_cloud = Vulnerabilities("rapid7_insight_cloud")
     vulnerabilities_rapid7_insight_cloud.run_sync(
-        regscale_ssp_id=regscale_ssp_id, vuln_filter=vuln_filter, scan_date=scan_date, all_scans=all_scans
+        regscale_ssp_id=regscale_ssp_id,
+        vuln_filter=vuln_filter,
+        scan_date=scan_date,
+        all_scans=all_scans,
+        filter=asset_filter.split(";") if asset_filter else [],
     )
 
 
@@ -171,13 +251,26 @@ def sync_rapid7_insight_cloud(regscale_ssp_id: int, vuln_filter: str, scan_date:
     is_flag=True,
     default=False,
 )
-def sync_servicenow_vr(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool) -> None:
+@click.option(
+    "--asset_filter",
+    help='STRING: Apply filters to asset queries. Can be a single filter "field[operator]value" or semicolon-separated filters "field1[op]value1;field2[op]value2"',
+    required=False,
+    type=str,
+    default=None,
+)
+def sync_servicenow_vr(
+    regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, asset_filter: str
+) -> None:
     """Sync Vulnerabilities from Servicenow Vr to RegScale."""
     from regscale.models.integration_models.synqly_models.connectors import Vulnerabilities
 
     vulnerabilities_servicenow_vr = Vulnerabilities("servicenow_vr")
     vulnerabilities_servicenow_vr.run_sync(
-        regscale_ssp_id=regscale_ssp_id, vuln_filter=vuln_filter, scan_date=scan_date, all_scans=all_scans
+        regscale_ssp_id=regscale_ssp_id,
+        vuln_filter=vuln_filter,
+        scan_date=scan_date,
+        all_scans=all_scans,
+        filter=asset_filter.split(";") if asset_filter else [],
     )
 
 
@@ -204,13 +297,26 @@ def sync_servicenow_vr(regscale_ssp_id: int, vuln_filter: str, scan_date: dateti
     is_flag=True,
     default=False,
 )
-def sync_tanium_cloud(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool) -> None:
+@click.option(
+    "--asset_filter",
+    help='STRING: Apply filters to asset queries. Can be a single filter "field[operator]value" or semicolon-separated filters "field1[op]value1;field2[op]value2"',
+    required=False,
+    type=str,
+    default=None,
+)
+def sync_tanium_cloud(
+    regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, asset_filter: str
+) -> None:
     """Sync Vulnerabilities from Tanium Cloud to RegScale."""
     from regscale.models.integration_models.synqly_models.connectors import Vulnerabilities
 
     vulnerabilities_tanium_cloud = Vulnerabilities("tanium_cloud")
     vulnerabilities_tanium_cloud.run_sync(
-        regscale_ssp_id=regscale_ssp_id, vuln_filter=vuln_filter, scan_date=scan_date, all_scans=all_scans
+        regscale_ssp_id=regscale_ssp_id,
+        vuln_filter=vuln_filter,
+        scan_date=scan_date,
+        all_scans=all_scans,
+        filter=asset_filter.split(";") if asset_filter else [],
     )
 
 
@@ -237,19 +343,33 @@ def sync_tanium_cloud(regscale_ssp_id: int, vuln_filter: str, scan_date: datetim
     is_flag=True,
     default=False,
 )
+@click.option(
+    "--asset_filter",
+    help='STRING: Apply filters to asset queries. Can be a single filter "field[operator]value" or semicolon-separated filters "field1[op]value1;field2[op]value2"',
+    required=False,
+    type=str,
+    default=None,
+)
 @click.option(
     "--url",
     type=click.STRING,
     help="Base URL for the Tenable Cloud API.",
     required=False,
 )
-def sync_tenable_cloud(regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, url: str) -> None:
+def sync_tenable_cloud(
+    regscale_ssp_id: int, vuln_filter: str, scan_date: datetime, all_scans: bool, asset_filter: str, url: str
+) -> None:
     """Sync Vulnerabilities from Tenable Cloud to RegScale."""
     from regscale.models.integration_models.synqly_models.connectors import Vulnerabilities
 
     vulnerabilities_tenable_cloud = Vulnerabilities("tenable_cloud")
     vulnerabilities_tenable_cloud.run_sync(
-        regscale_ssp_id=regscale_ssp_id, vuln_filter=vuln_filter, scan_date=scan_date, all_scans=all_scans, url=url
+        regscale_ssp_id=regscale_ssp_id,
+        vuln_filter=vuln_filter,
+        scan_date=scan_date,
+        all_scans=all_scans,
+        filter=asset_filter.split(";") if asset_filter else [],
+        url=url,
     )
 
 

regscale/integrations/commercial/wizv2/click.py

@@ -533,6 +533,18 @@ def sync_compliance(
     default=False,
     help="Mark created issues as POAMs (default: disabled)",
 )
+@click.option(
+    "--reuse-existing-reports/--no-reuse-existing-reports",
+    "-rer/-nrer",
+    default=True,
+    help="Reuse existing Wiz compliance reports instead of creating new ones (default: enabled)",
+)
+@click.option(
+    "--force-fresh-report/--no-force-fresh-report",
+    "-ffr/-nffr",
+    default=False,
+    help="Force creation of a fresh compliance report, ignoring existing reports (default: disabled)",
+)
 def compliance_report(
     wiz_project_id,
     regscale_id,
@@ -543,6 +555,8 @@ def compliance_report(
     create_issues,
     update_control_status,
     create_poams,
+    reuse_existing_reports,
+    force_fresh_report,
 ):
     """
     Process Wiz compliance reports and create assessments in RegScale.
@@ -557,6 +571,13 @@ def compliance_report(
     - Create issues for failed compliance assessments (if --create-issues enabled)
     - Update control implementation status (if --update-control-status enabled)
     - Support POAM creation for compliance issues
+
+    REPORT MANAGEMENT:
+    By default, the command will look for existing compliance reports in Wiz for the
+    specified project and rerun them instead of creating new ones. This prevents the
+    accumulation of duplicate reports in Wiz. Use --no-reuse-existing-reports to
+    always create new reports, or --force-fresh-report to force a new report even
+    when reuse is enabled.
     """
     from regscale.integrations.commercial.wizv2.compliance_report import WizComplianceReportProcessor
 
@@ -579,6 +600,8 @@ def compliance_report(
         update_control_status=update_control_status,
         report_file_path=report_file_path,
         bypass_control_filtering=True,  # Bypass filtering for performance with large control sets
+        reuse_existing_reports=reuse_existing_reports,
+        force_fresh_report=force_fresh_report,
     )
 
     # Process the compliance report using new ComplianceIntegration pattern

regscale/integrations/commercial/wizv2/compliance_report.py

@@ -103,27 +103,42 @@ class WizComplianceReportItem(ComplianceItem):
         return control_ids[0] if control_ids else ""
 
     def get_all_control_ids(self) -> list:
-        """Extract all control IDs from compliance check name."""
+        """Extract all control IDs from compliance check name and normalize leading zeros."""
         if not self.compliance_check_name:
             return []
 
-        # Parse control IDs from compliance check name
-        # Format: "AC-2(4) Account Management | Automated Audit Actions, AC-6(9) Least Privilege | Log Use of Privileged Functions"
-        # Use a regex that can find control IDs anywhere in the text
         control_id_pattern = r"([A-Za-z]{2}-\d+)(?:\s*\(\s*(\d+)\s*\))?"
-
         control_ids = []
+
         for part in self.compliance_check_name.split(", "):
             matches = re.findall(control_id_pattern, part.strip())
             for match in matches:
                 base_control, enhancement = match
-                if enhancement:
-                    control_ids.append(f"{base_control}({enhancement})")
-                else:
-                    control_ids.append(base_control)
+                normalized_control = self._normalize_base_control(base_control)
+                formatted_control = self._format_control_id(normalized_control, enhancement)
+                control_ids.append(formatted_control)
 
         return control_ids
 
+    def _normalize_base_control(self, base_control: str) -> str:
+        """Normalize leading zeros in base control number (e.g., AC-01 -> AC-1)."""
+        if "-" in base_control:
+            prefix, number = base_control.split("-", 1)
+            try:
+                normalized_number = str(int(number))
+                return f"{prefix.upper()}-{normalized_number}"
+            except ValueError:
+                return base_control.upper()
+        else:
+            return base_control.upper()
+
+    def _format_control_id(self, base_control: str, enhancement: str) -> str:
+        """Format control ID with optional enhancement."""
+        if enhancement:
+            return f"{base_control}({enhancement})"
+        else:
+            return base_control
+
     @property
     def affected_controls(self) -> str:
         """Get affected controls as comma-separated string for issues."""
@@ -217,6 +232,7 @@ class WizComplianceReportProcessor(ComplianceIntegration):
         bypass_control_filtering: bool = False,
         max_report_age_days: int = 7,
         force_fresh_report: bool = False,
+        reuse_existing_reports: bool = True,
         **kwargs,
     ):
         """
@@ -232,6 +248,7 @@ class WizComplianceReportProcessor(ComplianceIntegration):
         :param bool bypass_control_filtering: Skip control filtering for performance with large control sets
         :param int max_report_age_days: Maximum age in days for reusing existing reports (default: 7 days)
         :param bool force_fresh_report: Force creation of fresh report, ignoring existing reports
+        :param bool reuse_existing_reports: Whether to reuse existing Wiz reports instead of creating new ones (default: True)
         """
         # Call parent constructor with ComplianceIntegration parameters
         super().__init__(
@@ -250,6 +267,7 @@ class WizComplianceReportProcessor(ComplianceIntegration):
         self.bypass_control_filtering = bypass_control_filtering
         self.max_report_age_days = max_report_age_days
         self.force_fresh_report = force_fresh_report
+        self.reuse_existing_reports = reuse_existing_reports
         self.title = "Wiz Compliance"  # Required by ScannerIntegration
 
         # Initialize Wiz authentication
@@ -698,7 +716,7 @@ class WizComplianceReportProcessor(ComplianceIntegration):
         # Handle force fresh report request
         if self.force_fresh_report:
             logger.info("Force fresh report requested, creating new compliance report...")
-            return self._create_and_download_report()
+            return self._create_and_download_report(force_new=True)
 
         # Use instance variable max_report_age_days or legacy max_age_hours
         if max_age_hours is not None:
@@ -756,23 +774,82 @@ class WizComplianceReportProcessor(ComplianceIntegration):
         logger.info(f"Found recent report (age: {age_hours:.1f}h): {most_recent[0]}")
         return most_recent[0]
 
-    def _create_and_download_report(self) -> Optional[str]:
+    def _find_existing_compliance_report(self) -> Optional[str]:
         """
-        Create and download a new compliance report.
+        Find existing compliance report for the current project.
 
-        :return: Path to downloaded report file
+        :return: Report ID if found, None otherwise
         :rtype: Optional[str]
         """
-        logger.info(f"Creating compliance report for project: {self.wiz_project_id}")
+        try:
+            # Filter for compliance reports for this specific project
+            filter_by = {"project": [self.wiz_project_id], "type": ["COMPLIANCE_ASSESSMENTS"]}
 
-        # Create report
-        report_id = self.report_manager.create_compliance_report(self.wiz_project_id)
-        if not report_id:
-            logger.error("Failed to create compliance report")
+            logger.debug(f"Searching for existing compliance reports with filter: {filter_by}")
+            reports = self.report_manager.list_reports(filter_by=filter_by)
+
+            if not reports:
+                logger.info("No existing compliance reports found for this project")
+                return None
+
+            # Look for reports named "Compliance Report" (the default name)
+            compliance_reports = [report for report in reports if report.get("name", "").strip() == "Compliance Report"]
+
+            if not compliance_reports:
+                logger.info("No compliance reports with standard name found")
+                return None
+
+            # Return the first matching report (most recent will be used)
+            selected_report = compliance_reports[0]
+            report_id = selected_report.get("id")
+            report_name = selected_report.get("name", "Unknown")
+
+            logger.info(f"Found existing compliance report: '{report_name}' (ID: {report_id})")
+            return report_id
+
+        except Exception as e:
+            logger.error(f"Error searching for existing compliance reports: {e}")
             return None
 
-        # Wait for completion and get download URL
-        download_url = self.report_manager.wait_for_report_completion(report_id)
+    def _create_and_download_report(self, force_new: bool = False) -> Optional[str]:
+        """
+        Find existing compliance report and rerun it, or create a new one if none exists.
+
+        :param bool force_new: Force creation of new report, skip reuse logic
+        :return: Path to downloaded report file
+        :rtype: Optional[str]
+        """
+        if force_new or not self.reuse_existing_reports:
+            logger.info("Creating new compliance report (reuse disabled or forced)")
+            # Create new report
+            report_id = self.report_manager.create_compliance_report(self.wiz_project_id)
+            if not report_id:
+                logger.error("Failed to create compliance report")
+                return None
+
+            # Wait for completion and get download URL
+            download_url = self.report_manager.wait_for_report_completion(report_id)
+        else:
+            logger.info(f"Looking for existing compliance report for project: {self.wiz_project_id}")
+
+            # Try to find existing compliance report for this project
+            if existing_report_id := self._find_existing_compliance_report():
+                logger.info(
+                    f"Found existing compliance report {existing_report_id}, rerunning instead of creating new one"
+                )
+                # Rerun existing report
+                download_url = self.report_manager.rerun_report(existing_report_id)
+            else:
+                logger.info("No existing compliance report found, creating new one")
+                # Create new report
+                report_id = self.report_manager.create_compliance_report(self.wiz_project_id)
+                if not report_id:
+                    logger.error("Failed to create compliance report")
+                    return None
+
+                # Wait for completion and get download URL
+                download_url = self.report_manager.wait_for_report_completion(report_id)
+
         if not download_url:
             logger.error("Failed to get download URL for report")
             return None
@@ -825,6 +902,10 @@ class WizComplianceReportProcessor(ComplianceIntegration):
             # Prepare batch updates for passing controls
             implementations_to_update = []
 
+            # Debug: Show what keys are actually in the control_impl_map
+            if control_impl_map:
+                logger.debug(f"Control implementation map keys: {list(control_impl_map.keys())[:20]}")
+
             for control_id in passing_control_ids:
                 control_id_lower = control_id.lower()
                 logger.debug(f"Looking for control '{control_id_lower}' in implementation map")
@@ -836,12 +917,27 @@ class WizComplianceReportProcessor(ComplianceIntegration):
                     # Get the ControlImplementation object
                     impl = ControlImplementation.get_object(object_id=impl_id)
                     if impl:
-                        # Update status to Implemented
-                        impl.status = ControlImplementationStatus.Implemented.value
+                        # Update status using compliance settings
+                        new_status = self._get_implementation_status_from_result("Pass")
+                        logger.debug(f"Setting control {control_id} status from 'Pass' result to: {new_status}")
+                        impl.status = new_status
                         impl.dateLastAssessed = get_current_datetime()
                         impl.lastAssessmentResult = "Pass"
                         impl.bStatusImplemented = True
 
+                        # Ensure required fields are set if empty
+                        if not impl.responsibility:
+                            impl.responsibility = ControlImplementation.get_default_responsibility(
+                                parent_id=impl.parentId
+                            )
+                            logger.debug(
+                                f"Setting default responsibility for control {control_id}: {impl.responsibility}"
+                            )
+
+                        if not impl.implementation:
+                            impl.implementation = f"Implementation details for {control_id} will be documented."
+                            logger.debug(f"Setting default implementation statement for control {control_id}")
+
                         # Set audit fields if available
                         user_id = self.app.config.get("userId")
                         if user_id:
@@ -849,7 +945,7 @@ class WizComplianceReportProcessor(ComplianceIntegration):
                             impl.dateLastUpdated = get_current_datetime()
 
                         implementations_to_update.append(impl.dict())
-                        logger.info(f"Marking control {control_id} as Implemented")
+                        logger.info(f"Marking control {control_id} as {new_status}")
 
             # Batch update all implementations
             if implementations_to_update:
@@ -908,6 +1004,10 @@ class WizComplianceReportProcessor(ComplianceIntegration):
         implementations_to_update = []
         controls_not_found = []
 
+        # Debug: Show what keys are actually in the control_impl_map for comparison
+        if control_impl_map:
+            logger.debug(f"Control implementation map keys (first 20): {list(control_impl_map.keys())[:20]}")
+
         for control_id in control_ids:
             control_id_normalized = control_id.lower()
             logger.debug(f"Looking for control '{control_id_normalized}' in implementation map")
@@ -946,19 +1046,30 @@ class WizComplianceReportProcessor(ComplianceIntegration):
             logger.warning(f"Could not retrieve implementation object for ID {impl_id}")
             return None
 
-        # Update status to In Remediation
-        impl.status = ControlImplementationStatus.InRemediation.value
+        # Update status using compliance settings
+        new_status = self._get_implementation_status_from_result("Fail")
+        logger.debug(f"Setting control {control_id} status from 'Fail' result to: {new_status}")
+        impl.status = new_status
         impl.dateLastAssessed = get_current_datetime()
         impl.lastAssessmentResult = "Fail"
         impl.bStatusImplemented = False
 
+        # Ensure required fields are set if empty
+        if not impl.responsibility:
+            impl.responsibility = ControlImplementation.get_default_responsibility(parent_id=impl.parentId)
+            logger.debug(f"Setting default responsibility for control {control_id}: {impl.responsibility}")
+
+        if not impl.implementation:
+            impl.implementation = f"Implementation details for {control_id} will be documented."
+            logger.debug(f"Setting default implementation statement for control {control_id}")
+
         # Set audit fields if available
         user_id = self.app.config.get("userId")
         if user_id:
             impl.lastUpdatedById = user_id
             impl.dateLastUpdated = get_current_datetime()
 
-        logger.info(f"Marking control {control_id} as In Remediation")
+        logger.info(f"Marking control {control_id} as {new_status}")
         return impl.dict()
 
     def _log_update_summary(self, implementations_to_update: list, controls_not_found: list) -> None: